Module 7: Fundamentals of

Administering Windows Server 2008

Module 7: Fundamentals of Administering Windows Server 2008

• Using Windows Server 2008 Administrative Tools

• Monitoring Performance

• Monitoring Events

• Using Remote Desktop for Administration

• Configuring Security for Server Administration

Lesson 1: Using Windows Server 2008 Administrative Tools

• Microsoft Management Console

• Problem Reports and Solutions

• Server Manager

• Computer Management

• Device Manager

• Demonstration: Using Windows Server 2008 Administrative Tools

Microsoft Management Console

The Microsoft Management Console (MMC):• Is a framework for developing administrative

tools• Uses snap-ins to provide functionality• Allows you to create custom consoles

The Microsoft Management Console (MMC):• Is a framework for developing administrative

tools• Uses snap-ins to provide functionality• Allows you to create custom consoles

Problem Reports and Solutions

Problem Reports and Solutions:• Monitors system crashes• Checks for solutions to the current problems• Maintains a history of system problems• Informs you about the availability of solutions for

historical problems

Problem Reports and Solutions:• Monitors system crashes• Checks for solutions to the current problems• Maintains a history of system problems• Informs you about the availability of solutions for

historical problems

Server Manager

You can:

• Add or remove server roles

• Add or remove server features

• Monitor system events

• Manage devices

• Schedule tasks

• Manage local users and groups

• Configure Windows Firewall

• Configure storage

• Perform a backup

Server Manager is an MMC console with several snap-ins for managing your serverServer Manager is an MMC console with several snap-ins for managing your server

Computer Management

You can:

•Does not include roles and features.

• Includes many of the same snap-ins as Server Management

•Can manage Routing and Remote Access

•Can manage shared folders

•Also included in previous version of Windows

Computer Management is an MMC console with several snap-ins for managing your serverComputer Management is an MMC console with several snap-ins for managing your server

Device Manager

You can:

•View device status and information

•View device resources

•Configure device settings

•Enable and disable devices

•Update driver software

Device Manager is a snap-in that is used to view and manage hardware informationDevice Manager is a snap-in that is used to view and manage hardware information

Demonstration: Using Windows Server 2008 Administrative Tools

In this demonstration, you will see how to use:

• Problem Reports and Solutions

• Server Manager

• Computer Management

• Device Manager

Lesson 2: Monitoring Performance

• Task Manager

• Resource Overview

• Performance Monitor

• Reliability Monitor

• Data Collector Sets

• Demonstration: Using Reliability and Performance Monitor

Task Manager

Task Manager monitors:• Applications• Processes• Services• Basic CPU and memory statistics• Basic networking performance• Connected users

Task Manager monitors:• Applications• Processes• Services• Basic CPU and memory statistics• Basic networking performance• Connected users

Resource Overview

Resource Overview shows statistics for:• Processor• Memory• Disk• Network

Resource Overview shows statistics for:• Processor• Memory• Disk• Network

Performance Monitor

Performance Monitor can:• Monitor many performance

counters• Vary graphing format• View averages, minimum, and

maximum values• View current activity or logged data

Performance Monitor can:• Monitor many performance

counters• Vary graphing format• View averages, minimum, and

maximum values• View current activity or logged data

Reliability Monitor

Recorded events include:

• Software installation

• Application failures

• Hardware failures

• Windows failures

• Miscellaneous changes and failures

Reliability Monitor tracks system stability over time and generates a System Stability IndexReliability Monitor tracks system stability over time and generates a System Stability Index

Data Collector Sets

For a data collector set you can:

• Log counters, event trace data, and system configuration information

• View real time performance

• Define a schedule to start

• Define conditions to stop

• Run a task after completion

• Create alerts

Data Collector Sets are a way to organize multiple data points as a single group for managementData Collector Sets are a way to organize multiple data points as a single group for management

Demonstration: Using Reliability and Performance Monitor

In this demonstration, you will see how to monitor server performance by using Reliability and Performance Monitor

Lesson 3: Monitoring Events

• Event Viewer

• Windows Logs

• Applications and Services Logs

• Custom Views

• Advanced Event Viewer Features

• Demonstration: Using Event Viewer

Event Viewer

Event viewer:

• Is a utility for viewing event logs

• Displays XML events in an easy to read format

• Can display raw XML of events

Event levels:

• Error

• Warning

• Information

• Audit Success

• Audit Failure

Windows Logs

Log Description

Application log Contains events written by applications

Security log Contains auditing events

System log Contains events logged by Windows system components

Windows logs:

•Store events that apply to the entire system

•Are used by legacy applications

Applications and Services Logs

Log type Contents

Admin Events that indicate a problem and well-defined solution

Operational Events for general information and problems without specific solutions

Analytic Events that describe program operation and problems that cannot be resolved by user intervention

Debug Events used by developers to troubleshoot problems

Applications and Services logs:

•Are new in Windows Server 2008 and Windows Vista

•Divide events into more specific logs

•Can have multiple log types per service or application

Custom Views

Custom Views:

•Are saved queries

•Allow queries across multiple logs

•Allow queries to be reused at a later time

Custom view query options:

•Time

•Event level

•Event log

•Event source

•Event ID

•Task category

•Keywords

•User

•Computer

Advanced Event Viewer Features

Subscriptions:

•Collect copies of events from multiple computers

•Allow centralized analysis of events

Integration with Task Scheduler:

•Tasks can be triggered based on events

•Used for troubleshooting

Demonstration: Using Event Viewer

In this demonstration, you will see how to use Event Viewer to monitor Windows Server 2008

Lesson 4: Using Remote Desktop for Administration

• Remote Desktop for Administration

• Benefits of Remote Desktop for Administration

• Demonstration: Remote Desktop Client Configuration

• Securing Remote Desktop for Administration

• Demonstration: Using Remote Desktop for Administration

Remote Desktop for Administration

Remote Desktop for Administration:

• Allows access to the server desktop remotely

• Is limited to two connections

• Sends only screen updates and keystrokes between server and client

• Uses port 3389 by default

Benefits of Remote Desktop for Administration

The benefits of Remote Desktop for Administration are:

• Run server administrative tools without installing them on a workstation

• Run server administrative tools that cannot be installed on a workstation

• Works well over slow links

• May avoid the need to travel to remote locations

• May avoid the need to return to the office after hours

• Manage server core installations

Demonstration: Remote Desktop Client Configuration

In this demonstration you will see how to configure the Remote Desktop Client

Securing Remote Desktop for Administration

Remote Desktop for Administration is secured by:

• Enabling and disabling Remote Desktop for Administration

• Controlling members of the Remote Desktop Users group

RDP security settings:

• Security layer

• Encryption level

• Require authentication before allowing RDP connections to this computer

Demonstration: Using Remote Desktop for Administration

In this demonstration, you will see how to use Remote Desktop for Administration

Lesson 5: Configuring Security for Server Administration

• What Are the Local Built-in Groups?

• What Are the Domain Built-in Groups?

• What Are User Rights?

• How to Elevate Privileges for Administration

• Demonstration: Configuring Security for Server Administration

What Are the Local Built-in Groups?

Local built-in groups include:

• Administrators

• Backup Operators

• Event Log Readers

• Guests

• Network Configuration Operators

• Performance Log users

• Performance Monitor users

• Power Users

• Print Operators

• Users

What Are the Domain Built-in Groups?

Additional groups include:

• Account Operators

• Incoming Forest Trust Builders

• Pre-Windows 2000 Compatible Access

• Terminal Server License Servers

• Windows Authorization Access Group

Domain built-in groups include the local built-in groups, except for Power UsersDomain built-in groups include the local built-in groups, except for Power Users

What Are User Rights?

User rights:

• Control the ability to perform system tasks

• Can be configured in the local security policy

• Can be configured by Group Policy

How to Elevate Privileges for Administration

To elevate privileges for administration:

• In a graphical interface: Run As Administrator

• At a command prompt: runas

Demonstration: Configuring Security for Server Administration

In this demonstration, you will see how to configure security for server administration

Lab: Administering Windows Server 2008

• Exercise 1: Joining a server to the domain

• Exercise 2: Configuring Remote Desktop for Administration

• Exercise 3: Centralizing event logging

• Exercise 4: Resolving a performance issue by using Reliability and Performance Monitor

Logon information

Virtual computer NYC-DC1, NYC-SVR1, NYC-CL1

User name Administrator

Password Pa$$w0rd

Estimated time: 60 minutes

Lab Review

• Why are servers and workstations joined to a domain?

• Why was Paul West made a member of the Performance Log Users group?

• How do event subscriptions simplify the monitoring of servers?

Module Review and Takeaways

• Review Questions

• Real-world Issues and Scenarios

• Tools